Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Content-Type
Date
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
X-Cache
CF-RAY
X-AspNet-Version
X-Pingback
P3P
Age
Content-Language
X-UA-Compatible
Via
Access-Control-Allow-Origin
Expect-CT
X-Adblock-Key
Upgrade
P3p
X-Varnish
X-Cacheable
X-Check
X-Template
X-Language
Content-Security-Policy
X-Generator
X-Buckets
X-Drupal-Cache
X-Request-Id
X-AspNetMvc-Version
X-Type
X-Cache-Group
X-Pass-Why
X-Hacker
X-Ac
X-Cache-Hits
X-Powered-By-Plesk
Content-Location
Alt-Svc
X-FRAME-OPTIONS
X-Permitted-Cross-Domain-Policies
X-Runtime
X-Download-Options
Host-Header
MS-Author-Via
X-ShopId
X-Sorting-Hat-ShopId
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-Section
X-Dc
X-Sorting-Hat-PodId
X-ShardId
X-Sorting-Hat-PodId-Cached
X-Alternate-Cache-Key
X-IPLB-Instance
X-Powered-CMS
Cartoon
X-Served-By
X-UA-Device
Status
Access-Control-Allow-Credentials
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Amz-Cf-Id
X-Via
X-Iinfo
X-Cache-Status
X-Xss-Protection
X-Backend
X-Timer
X-DIS-Request-ID
X-ServedBy
X-CST
X-Contextid
CF-Cache-Status
X-Request-ID
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
X-Mod-Pagespeed
X-PC-Hit
X-PC-Key
Powered-By
Content-Encoding
X-PC-AppVer
X-PC-Host
X-PC-Date
Keep-Alive
X-Logged-In
X-CDN
X-Host
X-Rid
X-Cache-Hit
X-Server
X-Tumblr-Pixel-0
X-Tumblr-User
X-Tumblr-Pixel
X-Port
Referrer-Policy
X-Tumblr-Pixel-1
X-Server-Powered-By
X-Cache-Enabled
X-Robots-Tag
X-Tumblr-Pixel-2
X-Wix-Server-Artifact-Id
X-Endurance-Cache-Level
X-Seen-By
X-Wix-Renderer-Server
X-Wix-Request-Id
X-Nginx-Cache-Status
X-Accel-Version
WPE-Backend
X-Turbo-Charged-By
X-Page-Speed
X-Wix-PunisherID
WP-Super-Cache
X-Pad
X-Drupal-Dynamic-Cache
X-Forwarded-For
X-Content-Powered-By
Content-Security-Policy-Report-Only
X-Forwarded-Proto
X-Varnish-Cache
X-Content-Digest
X-Tumblr-Pixel-3
X-AH-Environment
X-Rack-Cache
Surrogate-Key-Raw
X-Pantheon-Styx-Hostname
X-Styx-Req-Id
X-Proxy-Cache
SPRequestGuid
X-SharePointHealthScore
X-Cnection
X-GitHub-Request-Id
X-Request-Country
MicrosoftSharePointTeamServices
X-MS-InvokeApp
X-Original-Date
X-XRDS-Location
X-LiteSpeed-Cache
Edge-Control
X-Cache-Lookup
X-Died
Cf-Railgun
Timing-Allow-Origin
X-FullPageCaching
X-Webserver
MicrosoftOfficeWebServer
X-Safe-Firewall
X-Amz-Id-2
X-Amz-Request-Id
Request-Id
Charset
X-PhApp
X-FW-Hash
X-FW-Static
X-FW-Type
X-FW-Serve
X-Content-Security-Policy
Edge-Cache-Tag
X-Node
X-INKT-SITE
X-INKT-URI
SPIisLatency
SPRequestDuration
X-HS-Cache-Config
X-HS-Content-Id
X-Hits
Composed-By
X-SERVER
Access-Control-Max-Age
X-CF-Powered-By
X-Tumblr-Pixel-4
X-WPE-Loopback-Upstream-Addr
Liferay-Portal
Grace
Served-By
Access-Control-Expose-Headers
Request-Context
X-Swift-SaveTime
X-Swift-CacheTime
X-Newrelic-App-Data
EagleId
X-BC-Stapler
X-Spip-Cache
X-Hyper-Cache
Fastly-Debug-Digest
X-CDN-Pop-IP
X-CDN-Pop
Content-MD5
X-Firenze-Processing-Times
X-Server-Name
X-PHP-Backend
X-Device
Rating
X-AWS-Id
X-LJ-Flow-ID
X-VWS-Id
X-Backend-Server
X-Dw-Request-Base-Id
X-Fastly-Request-ID
X-Microcache
X-VCache
Content-Style-Type
X-RateLimit-Remaining
Content-Script-Type
X-ServerName
X-Tumblr-Content-Rating
X-RateLimit-Limit
X-FB-Debug
X-RateLimit-Reset
X-User-Agent
X-Cloud-Trace-Context
X-Clacks-Overhead
Public-Key-Pins
X-TNCMS
X-Loop
Real-Hostname
X-Jimdo-Instance
X-Jimdo-Wid
X-Cache-Config
Surrogate-Control
X-XN-XNHTML
X-XN-Trace-Token
Refresh
Front-End-Https
X-Age
X-DDC-Arch-Trace
X-Acc-Exp
Xkey
Fpc-Cache-Id
X-Px
X-Hostname
PageSpeed
X-StackifyID
X-N-OperationId
X-Generated-By
X-Cached
X-Tumblr-Pixel-5
X-DNS-Prefetch-Control
X-Topify-Platform
X-Middleton-Response
X-Middleton-Display
X-Sol
X-WebKit-CSP
Response
Display
X-SS-Conf
X-SS-Location
X-LiteSpeed-Cache-Control
X-MiniProfiler-Ids
X-Zen-Fury
X-Request-Time
Surrogate-Key
TCN
X-Cached-By
X-DynaTrace-JS-Agent
X-Trace
X-PERF
X-ApacheServer
X-Whom
X-Content-Options
X-URL
X-CMS-Version
X-Url
X-Pantheon-Site
X-Pantheon-Phpreq
Rt-Fastcgi-Cache
X-Pantheon-Environment
X-DynaTrace
Edge-Control-Message
X-Microcachable
X-Outils-CS
Imagetoolbar
X-Amz-Version-Id
Product
X-Kinsta-Cache
X-Handled-By
Dmn
X-HS-Combine-CSS
Access-Control-Request-Method
X-AspNetWebPages-Version
X-SRCache-Fetch-Status
X-LBLID
X-SRCache-Store-Status
Alternate-Protocol
Host
X-Varnish-TTL
X-Umbraco-Version
X-From
DynaTrace
X-Magento-Tags
X-OneAgent-JS-Injection
X-Engine
X-HOST
X-Cache-Rule
ServedBy
P-WS
P-LB
X-Correlation-Id
X-Varnish-Cache-Hits
X-Tumblr-Pixel-6
X-Fastcgi-Cache
Powered
X-NWS-LOG-UUID
X-Recruiting
X-Ruxit-JS-Agent
X-FORWARDED-FOR
X-Location-Id
Fhost
X-Msg-2-Log
X-CacheServer
X-Edge-Location
X-Goog-Hash
Generator
X-Track
X-RESOURCE
X-Actual-URL
X-Hosted-By
WZWS-RAY
X-B-Cache
X-Powered-By-360WZB
X-Micro-Cache
X-Matrix-Server
X-URLSCHEME
X-Matrix-Proxy
X-Vtex-Processado-Em
X-Vtex-Remote-Cache
X-Vtex-Processed-At
X-Returned-From
X-Passed-To-DLL
X-Original-Request
X-Varnish-Host
X-Passed-To
X-Returned-From-DLL
X-Tec-Api-Root
No
X-VTEX-Janus-Router-Backend-App
X-Tec-Api-Version
X-Powered-By-VTEX-Janus-ApiCache
X-VTEX-Cache-Status-Janus-ApiCache
X-Art-Request-Id
X-Tec-Api-Origin
X-Varnish-Beresp-Grace
X-Varnish-Beresp-Status
X-Varnish-Beresp-Ttl
X-Passed-To-BeforeDispatch
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-PostProcessResponse
X-Stale
X-Application-Context
Fastcgi-Cache
X-Instart-Request-ID
Arr-Disable-Session-Affinity
X-Powered-By-VTEX-Janus-Edge
X-Developer
X-Cache-Age
Public-Key-Pins-Report-Only
X-Upstream
X-Accel-Expires
Origin
X-UD-Method
X-Cache-TTL
X-Source
X-App-Hosting
X-LB
Akamai-IP
X-Platform-Processor
X-Version
X-NetCat-Version
X-Platform-Router
X-Debug-Info
X-Rocket-Nginx-Bypass
X-Platform-Cluster
X-Device-Type
X-Content-Security-Policy-Report-Only
X-I-Sp
X-BS
X-VARNISH-Cache
Powered-By-ChinaCache
X-Internal-ReqID
X-S
X-Platform
X-Duration
X-TransIP-Balancer
Content-Hash
X-Response-Time
X-Storage
X-Shop-Id
X-Defender
X-HS-Content-Campaign-Id
X-Varnish-HitMiss
X-Cache-Info
X-Expires-Orig
X-Varnish-Count
USPLoggingUUID
X-Powered-By-VelaWeb
X-EdgeConnect-Origin-MEX-Latency
X-Daa-Tunnel
X-Gamma-Serve
X-ATG-Version
X-Translation
X-Microcache-Status
Pool
X-Server-ID
Ohc-File-Size
X-LW-Cache
Last-Published
HTTPS
MIME-Version
X-Cache-Debug
X-Cache-Operation
Content-Disposition
X-Varnish-Cacheable
X-I
X-Signature
X-TransIP-Backend
Node
X-EdgeConnect-MidMile-RTT
X-NoCache
X-Supported-By
X-Page-Cache
X-Content-Encoded-By
X-Cache-Tags
X-Director
Version
X-Origin
IBM-Web2-Location
X-TTL
X-Cache-Key
X-Firenze-Processing-Time
X-Front
X-Revision
X-Dispatcher
Cache-Key
X-Platform-Server
X-SV-Nginx-Duration
X-SV-Duration
X-Varnish-Age
X-SV-Pid
X-Hypernode
X-SV-FromDBCache
X-SV-CreatedAt
X-SV-Edge
X-SV-Expires
X-Client-IP
X-Magento-Cache-Debug
X-Flow-Powered
X-SV-Cacheable
X-SV-CacheTags
X-Varnish-RemainingTTL
X-Varnish-RemainingLife
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-Varnish-GracePeriod
X-F-Cache
X-Route-Server
X-Cache-Control-Orig
X-VTEX-Cache-Status-Janus-Edge
Cache-Provider
X-UPSTREAM
SSPAppContext
X-Dns-Prefetch-Control
Lsrequestid
Cneonction
X-Server-Upstream
ServerName
X-SSL-Cipher
X-Platform-Cache
Allow
Srv
X-Abgroup
X-PwB-Node
X-Lambda-Id
X-SSL-Protocol
ServerID
X-CJ-Soft
X-Dispatch
X-Grace
X-Debug
X-Vcap-Request-Id
X-ARC
X-Cache-Only-Varnish
SN
X-Cache-Lifetime
X-Akamai-Device-Characteristics
X-GeoIP-Country-Code
X-Varnish-Backend
IM-Version
X-AOL-HN
X-LB-Node
Accept-Encoding
X-Correlation-ID
X-Cache-Expires
X-Cookie-Domain
X-Last-Modified
PICS-Label
X-Geo-Country
X-Country-Code
Req-Id
X-Abuse
Fw-Via
X-Akamai-Transformed
Content-Encoding-Handler
Proxy-Connection
FAI-W-FLOW
X-ServerID
X-Cache-Server
X-Via-JSL
X-SDS
X-ORACLE-DMS-ECID
NnCoection
X-Sapient
X-Edge-IP
X-Sucuri-ID
Pv
Wsr-Cache
X-JAVAX-PORTLET-FACES-NAMESPACED-RESPONSE
Section-Io-Id
X-Time
Location
X-Sucuri-Cache
X-Nbs
X-Url-Base
Tracecode
Edge-Content-Tag
Page-Completion-Status
X-Content-Age
X-Loopia-Node
X-RequestId
X-Akamai-Device-Model
Backend
X-Speed-Cache-Key
X-Speed-Cache
X-Hiawatha-Cache
X-Amz-Meta-S3cmd-Attrs
X-Id
X-GeoIP-Country-Name
X-Xrds-Location
X-Proxy
X-Goog-Stored-Content-Encoding
X-Goog-Metageneration
X-Goog-Generation
X-Goog-Stored-Content-Length
X-GUploader-UploadID
X-IsCacheURL
X-Browser
X-Worker
X-Goog-Storage-Class
Accept-Charset
X-Generated
RTSS
HCVer
HAVer
X-FW
X-BKSrc
Qs-Cache
X-Yadis-Location
X-BackendServer
X-Cf-Powered-By
X-Varnish-Ttl
Author
X-SRCache-Key
X-SE-Debug
S
X-CDN-Node
X-CDN-Cache-Status
X-Cache-Engine
X-N
X-Orig-Vary
X-Nginx-Cache
X-PF-Uncompressing
Content-Transfer-Encoding
X-Shield-Request-Id
X-Drupal-Cache-Tags
S-Cnection
If-Modified-Since
X-Processing-Time
X-Server-Id
X-Frontend
Server-Info
X-Processed-By
X-Discourse-Route
Eomportal-Instance
X-Cache-Level
X-Rnd
Nodo
X-Varnish-Url
NetMindSessionID
AMF-Ver
X-Cache-Type
SRV
Cache
X-Cache-CFC
X-NB-Cached-Page
Cm-Server
WWW-Authenticate
X-Middleware-Start
X-CDN-Forward
X-DataDome
X-Vhost
X-Empowered-By
X-Pressidium-NinukisWP-Ver
X-Magnolia-Registration
X-Purge-URL
X-Magento-Cache-Control
A-Powered-By
X-Ttl
X-Environment
X-Yottaa-Metrics
Magicmarker
X-Always-Cache
X-ID
X-Yottaa-Optimizations
X-SO
X-Cache-Handler
X-App-Server
X-Config-Blacklist-Version
Use-Proxy
Local-Info
MC
X-Amz-Storage-Class
Xc-Version
X-Avg-Cookie-Expires
X-Powered-By-Server
X-ACMCache
X-Healthy
X-Akamai-Edgescape
Disablevcache
X-AVG-Country-Code
X-Redman-Final-Url
X-DealerOn
X-Srv
SEOMOZ
X-Cache-Control
MJ12bot
X-Redman-Backend
Access-Control-Allow-Header
X-HP-Trace-Project
X-Purge-Host
X-ClientSide-Caching
W
X-Pagename
Frame-Options
Warning
X-Framework
X-Route-To
X-Hit-Cache
X-Real-Server
X-Traffic
NODE
X-Varnish-ID
X-Cache-Fix
X-Litespeed-Cache-Control
X-HP-Trace-ID
AddOutputFilterByType
X-VARITI-CCR
SVR
X-Cache-PageType
Cached
X-Directory-Script
X-LB-Server
X-Amz-Meta-Cb-Modifiedtime
Thanks
X-Varnish-IP
Retry-After
X-FireWall-Port
X-Mobilized-By
X-EPiphany-Vid
Nitro-Cache
Front
X-IIJ-Cache
X-Client-Image-Vid
X-AF-Userserver
IISExport
Identity
X-Cache-Device-Type
X-Varnish-Hits
X-CDN-RULE
X-Source-ID
X-Client-Vid
X-CDN-COMPRESS
WN
Machine
X-ORACLE-DMS-RID
X-Remote-Addr
X-Webkit-CSP
X-Env
X-WN-ClientGroup
X-Dw-Trace-Id
X-WR-Flags
CacheControlHeader
X-VC-TTL
Server-Name
BALANCEDTO
X-Clara-ASAP
X-Varnish-Server
X-Session-Reinit
X-Cache-Provider
X-Cache-Source
X-ASAP-Cache
X-Cocoon-Version
NtCoent-Length
X-Drupal-Cache-Contexts
X-CB-Server
Cmsid
Cmstype
Cache-Tag
X-Runtime-Memory
X-CF-Passed-Proto
X-Drectory-Script
X-High-Performance
X-Nginx-Host
X-NODE
X-JG-Page-Cache
X-Varnish-Retries
X-SmugMug-Hiring
Smug-CDN
X-SmugMug-Values
X-TTFB-L
X-LP
X-TTFB
X-Debug-Token
CLMOB
X-HW
X-Sys-Req-ID
X-Cluster-Node
Cteonnt-Length
X-HTML-Minification-Powered-By
X-Location
X-Atraveo-ETag
X-Atraveo-Expires
X-Atraveo-Param-Rm
X-Atraveo-Cache-Control
X-Adobe-Loc
X-HOSTNAME
X-Adobe-Content
X-Atraveo-Set-Cookie
X-Atraveo-From-Varnish-Cache
X-Atraveo-TTL
EagleEye-TraceId
X-Cache-Doesi
X-Force
X-PRAM
X-Atraveo-Zone
X-Atraveo-Varnish-Server-Id
X-UA
X-Runtime-Rack
Content_type
X-Symfony-Cache
X-WR-MODIFICATION
X-Key
Web-App-Origin-Name
X-GeoIP
X-Twitter-Response-Tags
X-Transaction
X-WHOIS-Cached
X-ARRServer
X-Webcelerate
X-Ezoic-Cdn
X-Connection-Hash
HitType
From
X-Server-IP
Proxy-Agent
X-Mobile-URL
Bios
X-ServerIndex
X-Balanceador
Keywords
X-Stage
X-ACCELERATE
NLCacheNote
X-RiS-UFDI
X-Distil-CS
X-This-Proto
Backend-Timing
X-Analytics
Beyond-Iis
X-Varnish-Hostname
X-VC-Enabled
X-App
Ufe-Result
X-TB-M
Max-Age
X-Rack-Cors
Id
X-WP
X-Batcache
X-Blog
SBGI-7
SBGI-9
Fastly-Backend-Name
X-DTC
SBGI-5
SBGI-1
SBGI-10
X-NginX-Server
X-Adnet
SBGI-RenderTime
X-EC2-Instance-Id
SBGI-RealPath
X-HP-Redirect
SBGI-Device
MW-Webserver
X-Batcache-Reason
X-Culture
X-Unbounce-PageId
X-Disney-Akamai-Rule
DNNOutputCache
X-Unbounce-VisitorID
X-Unbounce-Variant
X-A
Yoncu-Errno
X-Server-Instance
X-Cache-Node
Dispatcher
X-CAPServer
X-Page
X-RealServer
X-Provisioner-Version
X-Req-Head-Response
X-Autoru-Host
Ctx
X-AutoRu-App-Id
X-HydroSheep
X-Map-Context
X-Autoru-LB
X-Esi
X-Domain-Checked
Nginx-Cache
Strikingly-Cached-Version
Strikingly-Cached
Strikingly-Cache-Region
X-Session-ID
X-NginX-Cache
X-App-Status
Access-Control-Allow-Method
Description
Pics-Label
X-Render-Time
X-Middleton-PageSpeed
X-Jphone-Copyright
XDomainRequestAllowed
X-Info
X-Cache-Dispatchercachecontrol
X-E
X-Rocket-Nginx-Serving-Static
OriginServer
X-SERVER-NAME
X-Wikidot-Backend
X-Wikidot-Static-Cache
X-Frame-Option
ServerSignature
ServerTokens
X-Machine
X-Generated-Time
Myheader
X-Backend-Status
X-Depends
X-Resolver-IP
X-B2f-Not-Route
X-Origin-404Back
X-Content-Type-Option
Home
X-Origin-404URL
Edgecast
X-Cache-Dispatcherpragma
X-SDE-Name
Dis-Env
X-Cache-TTL-Remaining
X-Garden-Version
X-Smartcache-Keys
X-Smartcache-Timeout
RN-Server
X-Hosting-Env
X-Artvisual-Server
X-OpenCart-Lightning
ScoreTracker
X-ReqId
SHInfo
Cache-Tags
X-Served-Server
X-Grid-Server
X-Goog-Meta-Replace
X-AEM
X-Rq
X-Goog-Meta-Policy
Buuteeq-Source
X-Trace-Id
Url
X-Ser
X-Unique-ID
WP-AdvCache-MemCached
X-Resty-Request-Id
AsisCache
X-LW-Web-Server
X-HostName
X-KoobooCMS-Version
X-HITS
X-Fedora-School-Id
X-SCM-Server-Number
X-NewRelic-App-Data
From-Origin
X-Hstore
Swift-Performance
COMMERCE-SERVER-SOFTWARE
X-OPNET-Transaction-Trace
X-Hrouter
TC-Cache-IC
X-HashTwo
TC-Cache-U
AC-ELC
TC-S-Cache
TC-S-Cache-M
Content-Server
X-Obj.Ttl
X-Cached-Status
X-Data-Request
X-CacheResult
X-Ghost-Cache-Status
X-SmartBan-URL
X-Proxy-Cache-Key
X-Origin-Server
X-NodeID
X-Proto
X-SmartBan-Host
X-RemovedCookies
X-Cache-On
ViewMode
X-GSL-Server
Sophnep-Edge-FX
X-Upstream-Status
X-Upstream-Backend
TC-Cache
X-Sc-Cache
Hname
X-Varnish-Cache-Local
X-Replay-Request-ID
X-PM-ID
VANITY-HOST
X-MSEdge-Ref
Accept-Language
X-Machine-Name
X-Aramark-SID
Access-Control-Request-Headers
X-Apm-Telemetry-Syncmark
X-HA-Backend
X-HA-Frontend
X-Plat
X-EMAC-Request-ID
X-Rebelmouse-Cache-Control
X-Nginx
X-Rebelmouse-Surrogate-Control
X-SilverStripe-Cache
Set-Cookie2
X-PBY
Paypal-Debug-Id
X-We-Are-Hiring
X-DSMX-Render-MS
X-DSMX-Rewrite-MS
X-Cache-Keep
X-MAT-GEO
X-MidCOM-Meta-Cache
X-Rewrite
X-ProcessESI
DrivedBy
X-RDP
X-VarnMisc-Url
X-VarnMisc-UrlChanged
SB-Cache-Life
X-Actindo-Thread-Id
X-Actindo-Request-Id
X-Actindo-Error-1
X-CRA-DC
X-Cache-Detail
SB-Site-IE-VERSION
Cluster-ID
X-Airee-Node
X-Amz-Id-1
X-CACHE-TTL
X-OCTOPOD
X-VarnState-NoCache
X-Actindo-Rs
X-Response
AccessControlAllowOrigin
Xc
SG
X-Cache-Via
X-Highwire-RequestId
X-Avvio-Cms-Cacheload
SB-Cache-Remaining
X-AMAZEEIO
X-WPL-DATA
X-Captured
SB-Site-Device
X-Highwire-SessionId
VServer
Ttl
SBMCLOUD
X-Unique-Id
X-Oracle-DMS-ECID
X-Cms-Mode
X-DB-Content-Length
Og
Provider
X-Nginx-Request-Processing-Time
X-W3TC-Minify
X-Dev
X-Goog-Meta-Goog-Reserved-File-Mtime
Web
MS-CV
X-Distributor
X-Header
X-Turpentine-Esi
X-IP
X-CSRF-Token
Worker
X-Detected-Device
X-XHR-Current-Location
AMP-Access-Control-Allow-Source-Origin
X-Webkit-CSP-Report-Only
X-Router
ServerIP
X-Viator-Tapersistentcookie
Lb
X-Frames-Options
X-Webstats-RespID
Server-ID
FastCGI-Cache-Status
Session-From
CommunityServer
X-Cache-Time
X-Title
F5-IpCliente
X-Secret
X-Hosting
Hamster
Gzip
Ibf5scheme
Traffic-Origin
Tempo
N365rili
X-M
ClientIP
Ram
X-V
X-MCB-Server
Noq
Response-Time
X-4ormat-Cacheable
X-Layout
X-Origin-Cache
X-Cache-Id
Service-Worker-Allowed
X-Desc
Server-Tuning
X-CacheID
Actual-Object-TTL
PagesDisplayed
X-Config-By
X-FRUIT
X-Search-Id
X-Flex-Community
X-Rewritten-By
X-Time-Microsecs
X-ManagedFusion-Rewriter-Version
X-Zendesk-User-Id
X-Zendesk-Origin-Server
X-Session-Id
X-Ezpublish-Installationid
X-LBPoolMember
Ews
X-WA-Info
X-Ezpublish-Nodeid
X-Highwire-Sitecode
X-Pass-Through
X-HAProxy
X-Pagely-Cache
Serverid
X-Highwire-Smart-Code
X-Flex-Evend
Aurora-Node
WebServer
Hosted-By
X-Flex-Tags
NS-VaryByCustom-Key
X-ACLR-Version
X-Amz-Meta-Content-Md5
X-Svr
X-Gyrobase-Publication
X-DN-Cache-Control
X-Forwarded-Host
X-Flex-Tag
Il-Cl
X-Flex-Evstart
X-Flex-Lang
Proxy-Cache
X-Flex-Lastmod
X-Reflector
X-Lb
X-Cache-BE
X-CACHE-KEY
X-RAMCache
X-Bcwwwid
X-Site
Device
X-Pj-Cache-Status
X-Varnish-Ip
Server-Ip
X-Ss-Location
X-Cdn-Forward
BackendServer
X-App-Runtime
RSB-LINK
NZSpeedy
X-Serv
X-Container
TP-L2-Cache
X-ChromeLogger-Data
X-Ss-Conf
X-Resource
RATING
X-Varnish-Action
X-Varnish-URL
X-Runtime-Affili
SiteSpeed
TP-Cache
X-SH-Cache-Status
SERVER-ID
X-Cache-Warmer
X-Reflector-Cache
X-Optimization
X-Cache-HT
PServer
X-REDIRECTSERVER
X-Proxy-Id
Resin-Trace
X-Sid
X-ENV
Rewriter
X-DeliveryServer
FindLaw
DbServerName
Content-Cache
X-Dynamic
X-Upgrade-Enabled
UrlWatchModule-Time
Webserver
X-Box
X-Application
X-Agent
X-Brought-To-You-By
X-Bip
X-Cluster
X-Cache-Extended
X-AppServer-Cache-Rule
X-Uncacheable
X-Checkout
X-UUID
X-Built-By
X-SV
Accept-CH
X-Cjtype
X-Backend-Name
User-Agent
Ozcache
X-Status
X-Src-Webcache
X-ASAP-Age
X-AG-MIPS
MwpReleaseVersion
X-DS1D
X-Forwarded-By
X-Restarts
X-HS-Status
X-NID
X-Pixelsilk-Server
X-Phpwcms-Page-Processed-In
X-Backend-Host
X-Server-Generated
X-Phpwcms-Release
CD4
X-Sites
X-ImpID
Arrnode
X-Dynamic-Cache
X-FIRSTBase
X-Route
X-Real-IP
X-Pixelsilk-Version
X-Test
X-WebNode
X-Rack-CORS
X-GoCache-CacheStatus
AGI-Request-ID
X-Varnish-Debug-TTL
X-Streams-Distribution
X-ServerAddr
X-Server-FQDN
X-Time-Zone
X-UPServer
X-Varnish-Instance
X-Varnish-Cached-TTL
X-Varnish-Cached
X-Script
X-Node-ID
X-Cache-Varnish
X-Built-With
D
X-Country
X-CPU-Time
X-MCF-ID
X-ELB
X-VLoc
Debug-Status
X-Meta-MSSmartTagsPreventParsing
X-Meta-Imagetoolbar
X-Instance-Name
X-Meta-MSThemeCompatible
X-Old-Content-Length
X-Varnish-Debug-Age
X-Server-Addr
X-Gannett-Site-Version
X-Fstrz
MSSmartTagsPreventParsing
Httpd-Identifier
Hostname
MSThemeCompatible
StatusCode
X-Cache-TTL-Current
X-Cache-TTL-Age
Cache-Status
MageStack-Debug
X-SCProxy
X-Processed
X-Powered-By-Home.Pl
X-Served
X-Tag-Playlist
MageStack-Area
Brightspot-Id
X-Lima-Id
X-HA
X-Cache-LB
X-Beatles
X-Author
X-Cname-TryFiles
X-Srcache-Store-Status
X-Deity
X-Debug-Message
MageStack-Cache
MageStack-Cache-Hits
Str-Ip
Str-Bsite
MageStack-Web-Node
X-Accel-Cache-Control
X-Amcomm-Site
X-Compressed-By
X-App-Version
MageStack-Tag
MageStack-PageSpeed
MageStack-Cache-Status
MageStack-Cache-Lifetime
MageStack-Cacheable
MageStack-Config
MageStack-Magento-Version
MageStack-Loadbalancer
Uuri
Quri
X-Pubstack
X-AppVersion
X-APP
X-Test-Debug
X-XHTML-Minification-Powered-By
X-Max-Age
SS
Fastly-Restarts
CDCHOST
X-PROCESSED-BY
X-FPC
X-RequesterIP
X-Theme
X-ZSITES-DNS
X-Who
NCache
INFO
AR-ATIME
X-Your-GrandPa-Would-Wait
X-Would-Your-GrandPa-Wait
AR-CACHE
AR-PoweredBy
X-Srcache-Fetch-Status
AR-SID
X-TTL-Age
X-Header-Treatment
X-Cache-Set
X-Beatles-Hits
X-CCM
DB-Nickname
X-ETag
X-Does-He-Have-Time
X-JSESSIONID
X-VNode
X-Magento-Action
X-L-Path
X-MainProfileURL
X-Pageid
X-Router-Backend
X-IP-Address
X-Nginx-Request-Time
X-CH-Device
X-Environment-Context
X-Fastly-Backend-Reqs
X-FreeTag-Count
X-Serendipity-InterfaceLang
X-Serendipity-InterfaceLangSource
Session-Id
X-LOCATION
X-DevSrv-CMS
X-HP-CAM-COLOR
XDisk
X-MainProfileCategory
X-MainProfileName
X-MainProfileID
X-UseReverse-Proxy
X-Webapp
X-Cacheable-TTL
X-Not-Cacheable
Provided-Host
Note
Referer
RequestId
Y-Trace
X-VC-Debug
Fw-Cache-Status
X-DEBUG
X-COUNTRY-CODE
ProxiaInstanceId
X-Beresp-Ttl
X-WebKit-CSP-Report-Only
WSCLoggingUUID
Vserver
X-Czt
Copyright
X-Obvious-Tid
X-Obvious-Info
X-Server-Instance-Name
X-AISO-Cacheable
X-AISO-Cache
Tesla.Performance
X-Debug-Out
Proxy1
X-Amz-Meta-Version-Id
X-7d-Trace-Id
X-Mobile-Rewrite
X-Varnish-Store
X-DynamicCache
X-7d-Instance-Id
X-UT-Cache
X-IsCached
X-Server-Ident
LB
X-Varnish-Currency
X-Turpentine-Cache
Section-Io-Cache
X-Varnish-Esi-Access
X-Varnish-Esi-Method
CacheControlMode
Yola-ID
X-Varnish-Max-Age
X-Transaction-Name
X-Purge-Level
X-Cache-Served
X-Varnish-Set-Cookie
Ez
Tk
VAR-Cache
WSR-Cache
X-Cache-Action
Tst
X-Memcached
X-BeResp-Ttl
X-Debug-Serve
VC-NoCache
Realaction
X-PoweredBy
X-LB-Frontend
X-Custom-Name
X-BC
X-AWS
X-LB-Backend
Phoenix-Proxy-Cache
X-Protected-By
X-Request-Processing-Time
X-Wm-1
X-Wm-VIP
Expiries
X-Ants-Machine-Id
X-Ants-Host
X-Archive-Guessed-Charset
TTL
X-Archive-Orig-Connection
X-Archive-Orig-Content-Length
X-Archive-Orig-Etag
Powered-By-VeryCDN
X-Archive-Orig-Server
X-WHO
X-Cache-Date
MachineName
Memento-Datetime
X-Request-Received
X-Server-App
OutputRewritten
X-Archive-Orig-Date
X-Via-NSCOPI
AliCDN-Forbidden-Reason
BM-Cache-Status
X-Tt-Dbg
ServerNode
X-Allow-Redis
X-Ar-Debug
X-Client-Ip
X-Config-Version
Www.Aujourdhui.Com
BM-Cache-Node
No-Cache
Cookie
X-TempoPesquisa
Kp-EeAlive
X-Hit
X-Node-Name
Apple-Itunes-App
Actioncode
BM-Cache-Key
Progma
X-Farm-Server
X-ServiceProvider
X-AISO-Server
CDN-Cache-Hit
X-Vary-Options
AMFplus-Ver
X-NewCloud-V-Cache
X-Cache-Me-Harder
IES-Server
X-SuperCache
X-Service-Id
RSL-Trace-ID
X-Clx-Request
X-DDM-SERVER
X-DDM-SERVER-UPDATED
X-MSU-SOURCE
Kanooh-Host
Load-Balancer
X-Varnish-Mode
Cleartype
X-Varnish-Auto-Cache-Miss
Dynatrace
Public-Extension
IsMobile
X-Sn-Servicetimems
X-Backend-TTL
X-B3-Spanid
X-B3-Traceid
X-Fpc
WFE
SINA-TS
X-NewsFlow-Sitename
X-9XB-Server
X-Instance-Id
X-Faeria
X-Catalyst
X-PBS-Appsvrip
Server-Id
X-SRV
X-Wily-Servlet
X-POPSUGAR-Server-Name
X-PBS-Fwsrvname
X-PBS-Appsvrname
X-Cache-FS-Status
ReqUrl
X-Obj-Ttl
X-RiS-PX
X-Instart-Cache-Id
X-Front-Cache
SINA-LB
X-Skip-Cache
X-Tradeindia-Request-GUID
FrontEnd
X-Geo-IP
X-Vid
X-Tradeindia-SMgmt
ResourceTag
X-Made-On
V-Age
X-Varnish-Cache-Ttl
X-ClusterID
X-Site-Name
Be
X-Static
X-BServer
X-BPool
TheAnswer
X-BPool-Back
X-BPool-Bx-Cache
X-BPool-Fx-Cache
EQ-Cache
EREV-Ver
PB-RID
PB-PID
Phoenix-A
Phoenix-Cache
Phoenix-Cache-V
Generate-Time
X-UPSTREAM-Address
HostName
X-Cache-ID
X-HEAD
X-ESI
Language
X-Ssl-Cipher
X-Nginx-Page-Cache
Microcache
GranicusServer
Container
!~Request-OOB-Work
Upgrade-Insecure-Requests
X-Dynatrace-Js-Agent
X-Csrf-Token
X-Imforza-Hosted
Type
X-Cache-V
X-Dynatrace
Page-Template
X-Enhanced-By
Https
DeleGate-Ver
X-ACache
X-BIT-Node
X-Serverid
CDN-Node
X-Wily-Info
X-FG-RequestId
X-Mobile-Device
X-Mobile-Device-Type
CDN-Cache
Phoenix-Mark